wt-destroy

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_CONTEXT_INJECTION
Full Analysis
  • [DYNAMIC_CONTEXT_INJECTION]: The skill uses dynamic context injection (the ! prefix) to gather metadata about the current working directory, git branch, worktree list, and PR status when the skill is loaded. These commands (pwd, git, gh) are standard developer tools and do not involve sensitive file access or network exfiltration to unauthorized domains.
  • [COMMAND_EXECUTION]: The skill executes Git and GitHub CLI commands to delete worktrees, branches, and close pull requests. These actions are destructive by design, but the skill implements a mandatory human-in-the-loop confirmation step using the AskUserQuestion tool before proceeding. It also uses a single bash invocation for the final cleanup to avoid shell environment errors if the current directory is removed.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 01:10 AM